$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: ZJzxob9ZLIITypsq7zrrXa62USJB9sOfEi3dRybajEM= Subject key identifier: A3:A4:9E:33:88:37:03:27:37:1B:FF:46:24:B9:02:CE:D6:CF:68:11 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 0199FF902D79EAA169E5C9D0F82402417B10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 1256 Signing time: Mon 20 Oct 2025 03:01:02 +0000 Manifest this update: Mon 20 Oct 2025 03:01:02 +0000 Manifest next update: Tue 21 Oct 2025 03:01:02 +0000 Files and hashes: 1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=) 2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 7: A36TtvXMPQL0vuYt-DbADXkioHg.roa (hash: gr5xlNyjdy6ao9YoMSyHuCoI8p4LyFouICazI8UxNgw=) 8: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=) 9: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=) 10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=) 11: TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa (hash: OH5WytZuz33ouqi8MQK3P99lvzQJRdnWAM/P6DB5FRw=) 12: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 13: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 14: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 15: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 16: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: H/mP33P0Z1FcOCoOYRSyR+cUrDb7PE8NVd99OJD0EZY=) 20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:90:2d:79:ea:a1:69:e5:c9:d0:f8:24:02:41:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Oct 20 03:01:02 2025 GMT Not After : Oct 21 03:01:02 2025 GMT Subject: CN=a3a49e3388370327371bff4624b902ced6cf6811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:f9:91:7d:99:6c:44:21:ef:35:7d:36:e3: 4f:a3:39:50:79:b5:ab:35:89:54:ae:22:6e:f6:fb: b8:c5:aa:1e:9f:8e:91:92:e6:26:c3:f1:03:57:78: de:55:45:ae:1e:2e:84:48:9b:e7:1b:71:46:d1:ce: ca:cf:a4:c6:ad:49:11:69:b4:a4:6c:66:36:52:87: a2:12:6c:95:8a:5e:da:2e:e9:eb:5e:ce:86:35:01: c6:1d:d5:17:f2:2f:c5:33:d4:4f:79:31:0c:fd:40: ac:0b:ea:26:19:67:da:a5:1d:04:76:12:38:7f:a6: 2e:f7:ef:74:75:f5:2f:c4:30:1f:b4:ce:43:5c:d5: 2f:18:78:7b:d4:09:d2:8f:bf:99:f8:d7:2d:1f:bc: 9f:0e:59:da:11:81:52:33:42:ee:61:89:77:f5:44: 33:dd:63:06:9f:21:4e:12:96:ec:2a:01:ad:d3:a6: 3d:06:3e:41:08:92:9e:71:5e:f6:0d:fa:bb:6d:87: fc:29:70:67:8e:af:3f:db:bc:01:38:3f:68:9a:79: 60:90:25:66:c1:43:17:48:63:80:08:95:45:39:dc: 65:ec:13:95:bd:85:e1:25:57:85:f1:f5:c9:30:43: 38:03:f1:87:f2:97:a9:58:a7:c2:f0:c4:cf:a1:c9: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A4:9E:33:88:37:03:27:37:1B:FF:46:24:B9:02:CE:D6:CF:68:11 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1f:9a:61:1d:af:c2:b7:96:9b:b0:30:67:5c:bc:bb:94:01: d7:ba:e0:50:2f:ae:31:ab:52:75:97:bc:9c:d6:ec:c6:24:b1: 48:67:84:47:fd:ba:88:89:33:94:32:42:7b:38:8f:54:0d:71: da:72:f3:d5:77:e8:78:ee:b7:19:5a:e0:24:d3:85:f5:2a:95: 9c:a1:61:37:e6:60:ca:d3:81:af:76:54:c3:ba:98:54:68:30: 78:ee:8e:97:80:96:58:d8:db:96:3a:a9:66:c5:20:b9:35:fe: 96:2f:14:ea:81:42:fe:66:fc:9b:75:5c:f0:63:43:32:76:31: 2c:7e:85:6e:d1:77:b4:ba:cc:ba:23:6a:65:11:42:9b:57:1e: 2b:f9:a0:bb:c0:b9:38:85:ff:e8:e6:37:1a:a4:54:1f:08:fa: a0:eb:72:48:08:20:bc:12:27:22:a1:5a:30:34:9f:05:8e:06: 87:07:69:fa:a0:45:2f:b6:0b:ed:d0:f9:ee:e0:c8:ec:2b:25: 76:eb:f7:b7:72:c4:02:bd:87:5f:d3:a2:81:06:91:fc:3e:92: ef:6a:a7:82:3b:1e:24:9a:fe:ad:93:90:34:9b:9f:6c:51:5b: 1a:2b:56:75:fa:a1:51:2d:f1:b0:f4:40:25:90:5b:8d:61:52: 8a:50:4b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/kC156qFp5cnQ+CQCQXsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUxMDIwMDMwMTAyWhcNMjUxMDIxMDMwMTAyWjAzMTEwLwYDVQQD EyhhM2E0OWUzMzg4MzcwMzI3MzcxYmZmNDYyNGI5MDJjZWQ2Y2Y2ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFz5kX2ZbEQh7zV9NuNPozlQebWr NYlUriJu9vu4xaoen46RkuYmw/EDV3jeVUWuHi6ESJvnG3FG0c7Kz6TGrUkRabSk bGY2UoeiEmyVil7aLunrXs6GNQHGHdUX8i/FM9RPeTEM/UCsC+omGWfapR0EdhI4 f6Yu9+90dfUvxDAftM5DXNUvGHh71AnSj7+Z+NctH7yfDlnaEYFSM0LuYYl39UQz 3WMGnyFOEpbsKgGt06Y9Bj5BCJKecV72Dfq7bYf8KXBnjq8/27wBOD9omnlgkCVm wUMXSGOACJVFOdxl7BOVvYXhJVeF8fXJMEM4A/GH8pepWKfC8MTPocm+QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOknjOINwMnNxv/RiS5As7Wz2gRMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch+aYR2v wreWm7AwZ1y8u5QB17rgUC+uMatSdZe8nNbsxiSxSGeER/26iIkzlDJCeziPVA1x 2nLz1XfoeO63GVrgJNOF9SqVnKFhN+ZgytOBr3ZUw7qYVGgweO6Ol4CWWNjbljqp ZsUguTX+li8U6oFC/mb8m3Vc8GNDMnYxLH6FbtF3tLrMuiNqZRFCm1ceK/mgu8C5 OIX/6OY3GqRUHwj6oOtySAggvBInIqFaMDSfBY4Ghwdp+qBFL7YL7dD57uDI7Csl duv3t3LEAr2HX9OigQaR/D6S72qngjseJJr+rZOQNJufbFFbGitWdfqhUS3xsPRA JZBbjWFSilBLFA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:52:27 2025 by rpki-client